• Re: Free Software DVD contains non-free firmware

    From Andrew M.A. Cater@21:1/5 to Birzhan Amirov on Mon Aug 28 01:50:02 2023
    On Sun, Aug 27, 2023 at 04:12:02PM -0700, Birzhan Amirov wrote:
    Hello Debian CD Images team.

    I decided to switch to the latest version (12.1.0), and encountered the following issues:

    1) Looks like this DVD image:
    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/

    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso
    which is supposed to be Free Software only, actually contains 3rd party non-free firmware.
    The way I discovered it was that my 6th gen Lenovo ThinkPad x1 carbon wifi card started working, while with 11.6 and prior it didn't have the firmware and was disabled because of that.


    Hi,

    Debian has had a full General Resolution on this and resolved to include non-free firmware as part of the installer, especially because without this
    you cannot install Debian on some hardware if you need sound, for example.

    https://www.debian.org/vote/2022/vote_003

    This image is labeled as
    "Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-1 with firmware 20230722-10:49".
    Was there some kind of mistake when publishing the images?


    This is not a mistake: see also the release notes for 12. This is a change
    from Debian 11.

    https://www.debian.org/releases/bookworm/releasenotes

    2) Also, when I tried to download this disk [DVD-1] using jigdo, I ended up getting an image of the first disk that wasn't bootable.


    Can you show us where you got the jigdo files from, please?

    Thanks and Regards, John Amirov.

    All the very best, as ever,

    Andy Cater

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Birzhan Amirov@21:1/5 to All on Mon Aug 28 01:40:01 2023
    Hello Debian CD Images team.

    I decided to switch to the latest version (12.1.0), and encountered the following issues:

    1) Looks like this DVD image:
    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/

    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso
    which is supposed to be Free Software only, actually contains 3rd party non-free firmware.
    The way I discovered it was that my 6th gen Lenovo ThinkPad x1 carbon wifi
    card started working, while with 11.6 and prior it didn't have the firmware
    and was disabled because of that.

    This image is labeled as
    "Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-1 with
    firmware 20230722-10:49".
    Was there some kind of mistake when publishing the images?

    2) Also, when I tried to download this disk [DVD-1] using jigdo, I ended up getting an image of the first disk that wasn't bootable.

    Thanks and Regards, John Amirov.

    <div dir="ltr"><div>Hello Debian CD Images team.</div><div><br></div><div>I decided to switch to the latest version (12.1.0), and encountered the following issues:</div><div><br></div>1) Looks like this DVD image: <div>        <a href="https://
    cdimage.debian.org/debian-cd/current/amd64/iso-dvd/">https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/</a><div>        <a href="https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso">https://cdimage.debian.
    org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso</a><br></div><div>which is supposed to be Free Software only, actually contains 3rd party non-free firmware.</div></div><div>The way I discovered it was that my 6th gen Lenovo ThinkPad
    x1 carbon wifi card started working, while with 11.6 and prior it didn&#39;t have the firmware and was disabled because of that.<br></div><div><br></div><div>This image is labeled as <br></div><div>&quot;Debian GNU/Linux 12.1.0 _Bookworm_ - Official
    amd64 DVD Binary-1 with firmware 20230722-10:49&quot;.</div><div>Was there some kind of mistake when publishing the images?</div><div><br></div><div>2) Also, when I tried to download this disk [DVD-1] using jigdo, I ended up getting an image of the first
    disk that wasn&#39;t bootable.</div><div><br></div><div>Thanks and Regards, John Amirov.<br></div></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Birzhan Amirov@21:1/5 to All on Mon Aug 28 02:00:01 2023
    Additionally,

    I've just checked the DVDs of 12.1.0 and 11.6.0, and it looks like all the
    DVDs of 12.1.0 are labeled like the following:
    `Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-{X} with firmware 20230722-10:49`, where X is the DVD number.

    ---

    However, the releases of 11.6.0 are labeled as the following:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Official amd64 DVD Binary-{X} 20221217-10:40`, where X is the DVD number.
    Notice how there is no string "with firmware" in these labels.

    At the same time, when looking at a community version of 11.6.0 DVD, which contains non-free firmware, that's exactly how it's labeled:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Unofficial amd64 DVD Binary-1 with firmware 20221217-10:46`.
    Notice that the string "with firmware" is present in the label of the DVD
    with non-free firmware.

    ---

    I'm still trying to understand what that's supposed to mean.
    Are you `Officially` non-free software now, or is it some insider attack
    trying to compromise your integrity?
    Do you have an `Official` way to de-poison your release, and if so, is it published as a document?

    Regards, John.

    On Sun, Aug 27, 2023 at 4:12 PM Birzhan Amirov <[email protected]> wrote:

    Hello Debian CD Images team.

    I decid
  • From Andrew M.A. Cater@21:1/5 to Birzhan Amirov on Mon Aug 28 02:50:01 2023
    On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:
    Additionally,

    I've just checked the DVDs of 12.1.0 and 11.6.0, and it looks like all the DVDs of 12.1.0 are labeled like the following:
    `Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-{X} with firmware 20230722-10:49`, where X is the DVD number.


    Correct.

    ---

    However, the releases of 11.6.0 are labeled as the following:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Official amd64 DVD Binary-{X} 20221217-10:40`, where X is the DVD number.
    Notice how there is no string "with firmware" in these labels.


    For 11.* and earlier, we had two versions of the images. An image containing only free firmware and an "unofficial" image containing firmware.

    After the GR, it was resolved that we could provide non-free firmware on
    the installer in order to install Debian. Especially important when
    newer laptops don't have other than WiFi interfaces, for example.

    At the same time, when looking at a community version of 11.6.0 DVD, which contains non-free firmware, that's exactly how it's labeled:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Unofficial amd64 DVD Binary-1 with firmware 20221217-10:46`.
    Notice that the string "with firmware" is present in the label of the DVD with non-free firmware.


    Images produced by the same team within Debian, yes.
    ---

    I'm still trying to understand what that's supposed to mean.
    Are you `Officially` non-free software now, or is it some insider attack trying to compromise your integrity?

    We include non-free firmware on the install medium. We keep that in a separate archive. If you install only main and non free firmware, you are not
    installing any more non-free software than necessary to install the operating system.

    Do you have an `Official` way to de-poison your release, and if so, is it published as a document?


    You can pass various parameters to the installer: you can also uninstall the non-free firmware after installation - a record of what is installed is recorded

    All the best

    Andy Cater
    Regards, John.

    On Sun, Aug 27, 2023 at 4:12 PM Birzhan Amirov <[email protected]> wrote:

    Hello Debian CD Images team.

    I decided to switch to the latest version (12.1.0), and encountered the following issues:

    1) Looks like this DVD image:
    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/

    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso
    which is supposed to be Free Software only, actually contains 3rd party non-free firmware.
    The way I discovered it was that my 6th gen Lenovo ThinkPad x1 carbon wifi card started working, while with 11.6 and prior it didn't have the firmware and was disabled because of that.

    This image is labeled as
    "Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-1 with firmware 20230722-10:49".
    Was there some kind of mistake when publishing the images?

    2) Also, when I tried to download this disk [DVD-1] using jigdo, I ended
    up getting an image of the first disk that wasn't bootable.

    Thanks and Regards, John Amirov.


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Andrew M.A. Cater on Mon Aug 28 16:20:01 2023
    "Andrew M.A. Cater" <[email protected]> writes:

    On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:
    ...
    Do you have an `Official` way to de-poison your release, and if so, is it
    published as a document?


    You can pass various parameters to the installer: you can also uninstall the non-free firmware after installation - a record of what is installed is recorded

    Andy seems to have given you something of a politician's answer there,
    so I'll try giving a more direct one:

    No, not as far as I know (if by "de-poison" you mean get to the point
    where the resulting image file has no trace of the firmware on it).

    However, it is possible to instruct the installer to not take any notice
    of the firmware, nor even try to detect if it might be needed:

    https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware

    which will provide you with exactly the same experience as would have
    been achieved by using media that did not include the firmware in the
    first place.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it (by replacing relevant portions of the
    images with NUL characters, say) but the effort required to build and
    test such a tool would have to be diverted from other tasks (e.g.
    getting the media to work at all, on currently unsupported hardware).

    If you feel that such a tool should be written, and have the skills to contribute to such an effort, then I'm sure the Debian-CD team will be
    glad to explain what would be involved.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmTsrKAACgkQ0EujoAEl 1cC91A//TepOasAcxRoQ8xSOD2v4TfkmTFA7jokw0eR0DZzCosWMZypnhDGpRUaF rIIjE1yuPMp/+JIGToYFcHVWqw5oKYKkyssTGf/TaWoINsaEEvDNnV5KvPVzLIik oRtEfk1RpItUu+PQHS2g7XGhlCZgW4MDj4pyUX05rKl7B0mfPdW0SqBFZT4h5JOn sqwadJLS7YgMWiXPjRsMw1NOMMNSIbOWSFJ2+HEOPcSoGxyOxW4UqqSZ3H4KMuaA kc11WbmBFY8kHV6REbcUhuphXy14grOYsWzV57WWBQipVhWshzkZcQzVxuvtrihX ietiZs58i1p8A7bZYiNFEkJ8gS5GXI25z3ygNgncKXtkckLSvoA44QDtNNNA5l9c FwrP+FJLbORY0FRi0+zQh6Ls55rVki30PBQl8ZOVI6GKd2oZnrJ1Op8wO1wEMj9+ L/8JEY46oE2B+olBJzyVLAE0/7UJhLDvhQXPCqqrATqZu56qdNeJs9aPQ3Pqsa8W K5GOdTHXqIUArDg9dOgNCMkrcNcWrVWLOK3Khfntk8aGw9I5o3OB2+g0dj6ZU00x at2isxLrS6YlDW2Ahszwu8a88yrvifdWWzebQkfiin8lkveFyoVqIlvVsvjmF8HO zF0MEe0jJDJJRz2u6OJXX22+nPWRNVNTuX6uJULs4cCc7koqdC0=JfMJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Birzhan Amirov@21:1/5 to [email protected] on Mon Aug 28 19:20:01 2023
    Hello,

    Thank you for your quick and detailed reply.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it ... but the effort required to build and
    test such a tool would have to be diverted from other tasks.
    ... to contribute to such an effort, then I'm sure the Debian-CD team
    will be
    glad to explain what would be involved.

    Just curious, is my understanding correct, that you had such a tool at the
    time of 11.6.0, but not anymore?

    Regards, John.

    On Mon, Aug 28, 2023 at 7:17 AM Philip Hands <[email protected]> wrote:

    "Andrew M.A. Cater" <[email protected]> writes:

    On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:
    ...
    Do you have an `Official` way to de-poison your release, and if so, is
    it
    published as a document?


    You can pass various parameters to the installer: you can also uninstall
    the
    non-free firmware after installation - a record of what is installed is
    recorded

    Andy seems to have given you something of a politician's answer there,
    so I'll try giving a more direct one:

    No, not as far as I know (if by "de-poison" you mean get to the point
    where the resulting image file has no trace of the firmware on it).

    However, it is possible to instruct the installer to not take any notice
    of the firmware, nor even try to detect if it might be needed:


    https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware

    which will provide you with exactly the same experience as would have
    been achieved by using media that did not include the firmware in the
    first place.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it (by replacing relevant portions of the images with NUL characters, say) but the effort required to build and
    test such a tool would have to be diverted from other tasks (e.g.
    getting the media to work at all, on currently unsupported hardware).

    If you feel that such a tool should be written, and have the skills to contribute to such an effort, then I'm sure the Debian-CD team will be
    glad to explain what would be involved.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil


    <div dir="ltr"><div>Hello,</div><div><br></div><div>Thank you for your quick and detailed reply.</div><div><br></div><div>&gt; I suppose that we could provide a tool that would be able produce an<br></div>image with no non-free data on it ... but the
    effort required to build and<br>test such a tool would have to be diverted from other tasks.<div>&gt; ... to contribute to such an effort, then I&#39;m sure the Debian-CD team will be<br>glad to explain what would be involved.<br><div><br></div><div>Just
    curious, is my understanding correct, that you had such a tool at the time of 11.6.0, but not anymore?</div><div><br></div><div>Regards, John.</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 28, 2023 at 7:17 
    AM Philip Hands &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">&quot;Andrew M.A. Cater&
    quot; &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; writes:<br>

    &gt; On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:<br> ...<br>
    &gt;&gt; Do you have an `Official` way to de-poison your release, and if so, is it<br>
    &gt;&gt; published as a document?<br>
    &gt;&gt; <br>
    &gt;<br>
    &gt; You can pass various parameters to the installer: you can also uninstall the <br>
    &gt; non-free firmware after installation - a record of what is installed is recorded<br>

    Andy seems to have given you something of a politician&#39;s answer there,<br> so I&#39;ll try giving a more direct one:<br>

      No, not as far as I know (if by &quot;de-poison&quot; you mean get to the point<br>
      where the resulting image file has no trace of the firmware on it).<br>

    However, it is possible to instruct the installer to not take any notice<br>
    of the firmware, nor even try to detect if it might be needed:<br>

      <a href="https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware" rel="noreferrer" target="_blank">https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware</a><br>

    which will provide you with exactly the same experience as would have<br>
    been achieved by using media that did not include the firmware in the<br>
    first place.<br>

    I suppose that we could provide a tool that would be able produce an<br>
    image with no non-free data on it (by replacing relevant portions of the<br> images with NUL characters, say) but the effort required to build and<br>
    test such a tool would have to be diverted from other tasks (e.g.<br>
    getting the media to work at all, on currently unsupported hardware).<br>

    If you feel that such a tool should be written, and have the skills to<br> contribute to such an effort, then I&#39;m sure the Debian-CD team will be<br> glad to explain what would be involved.<br>

    Cheers, Phil.<br>
    -- <br>
    Philip Hands -- <a href="https://hands.com/~phil" rel="noreferrer" target="_blank">https://hands.com/~phil</a><br>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Birzhan Amirov@21:1/5 to All on Mon Aug 28 20:50:01 2023
    Also, should this wikipedia article be updated? https://en.wikipedia.org/wiki/Debian_Free_Software_Guidelines

    On Mon, Aug 28, 2023 at 9:55 AM Birzhan Amirov <[email protected]> wrote:

    Hello,

    Thank you for your quick and detailed reply.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it ... but the effort required to build and test such a tool would have to be diverted from other tasks.
    ... to contribute to such an effort, then I'm sure the Debian-CD team
    will be
    glad to explain what would be involved.

    Just curious, is my understanding correct, that you had such a tool at the time of 11.6.0, but not anymore?

    Regards, John.

    On Mon, Aug 28, 2023 at 7:17 AM Philip Hands <[email protected]> wrote:

    "Andrew M.A. Cater" <[email protected]> writes:

    On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:
    ...
    Do you have an `Official` way to de-poison your release, and if so, is
    it
    published as a document?


    You can pass various parameters to the installer: you can also
    uninstall the
    non-free firmware after installation - a record of what is installed is
    recorded

    Andy seems to have given you something of a politician's answer there,
    so I'll try giving a more direct one:

    No, not as far as I know (if by "de-poison" you mean get to the point
    where the resulting image file has no trace of the firmware on it).

    However, it is possible to instruct the installer to not take any notice
    of the firmware, nor even try to detect if it might be needed:


    https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware

    which will provide you with exactly the same experience as would have
    been achieved by using media that did not include the firmware in the
    first place.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it (by replacing relevant portions of the
    images with NUL characters, say) but the effort required to build and
    test such a tool would have to be diverted from other tasks (e.g.
    getting the media to work at all, on currently unsupported hardware).

    If you feel that such a tool should be written, and have the skills to
    contribute to such an effort, then I'm sure the Debian-CD team will be
    glad to explain what would be involved.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil



    <div dir="ltr">Also, should this wikipedia article be updated?<div><a href="https://en.wikipedia.org/wiki/Debian_Free_Software_Guidelines">https://en.wikipedia.org/wiki/Debian_Free_Software_Guidelines</a><br></div></div><br><div class="gmail_quote"><div
    dir="ltr" class="gmail_attr">On Mon, Aug 28, 2023 at 9:55 AM Birzhan Amirov &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px
    solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hello,</div><div><br></div><div>Thank you for your quick and detailed reply.</div><div><br></div><div>&gt; I suppose that we could provide a tool that would be able produce an<br></div>image
    with no non-free data on it ... but the effort required to build and<br>test such a tool would have to be diverted from other tasks.<div>&gt; ... to contribute to such an effort, then I&#39;m sure the Debian-CD team will be<br>glad to explain what would
    be involved.<br><div><br></div><div>Just curious, is my understanding correct, that you had such a tool at the time of 11.6.0, but not anymore?</div><div><br></div><div>Regards, John.</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="
    gmail_attr">On Mon, Aug 28, 2023 at 7:17 AM Philip Hands &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);
    padding-left:1ex">&quot;Andrew M.A. Cater&quot; &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; writes:<br>

    &gt; On Sun, Aug 27, 2023 at 04:38:58PM -0700, Birzhan Amirov wrote:<br> ...<br>
    &gt;&gt; Do you have an `Official` way to de-poison your release, and if so, is it<br>
    &gt;&gt; published as a document?<br>
    &gt;&gt; <br>
    &gt;<br>
    &gt; You can pass various parameters to the installer: you can also uninstall the <br>
    &gt; non-free firmware after installation - a record of what is installed is recorded<br>

    Andy seems to have given you something of a politician&#39;s answer there,<br> so I&#39;ll try giving a more direct one:<br>

      No, not as far as I know (if by &quot;de-poison&quot; you mean get to the point<br>
      where the resulting image file has no trace of the firmware on it).<br>

    However, it is possible to instruct the installer to not take any notice<br>
    of the firmware, nor even try to detect if it might be needed:<br>

      <a href="https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware" rel="noreferrer" target="_blank">https://wiki.debian.org/Firmware#How_to_disable_detection_and_use_of_non-free_firmware</a><br>

    which will provide you with exactly the same experience as would have<br>
    been achieved by using media that did not include the firmware in the<br>
    first place.<br>

    I suppose that we could provide a tool that would be able produce an<br>
    image with no non-free data on it (by replacing relevant portions of the<br> images with NUL characters, say) but the effort required to build and<br>
    test such a tool would have to be diverted from other tasks (e.g.<br>
    getting the media to work at all, on currently unsupported hardware).<br>

    If you feel that such a tool should be written, and have the skills to<br> contribute to such an effort, then I&#39;m sure the Debian-CD team will be<br> glad to explain what would be involved.<br>

    Cheers, Phil.<br>
    -- <br>
    Philip Hands -- <a href="https://hands.com/~phil" rel="noreferrer" target="_blank">https://hands.com/~phil</a><br>
    </blockquote></div>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Birzhan Amirov on Mon Aug 28 22:20:01 2023
    Birzhan Amirov <[email protected]> writes:

    Hello,

    Thank you for your quick and detailed reply.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it ... but the effort required to build and test such a tool would have to be diverted from other tasks.
    ... to contribute to such an effort, then I'm sure the Debian-CD team
    will be
    glad to explain what would be involved.

    Just curious, is my understanding correct, that you had such a tool at the time of 11.6.0, but not anymore?

    No - it used to be that 2 sets of images were produced, and which then
    had to be independently tested, thus expending a lot of overlapping
    effort.

    It is also the case that many people would download the "Official"
    images, and discover that they could not actually achieve an install on
    the hardware that they had to hand, and then would either abandon Debian
    never to return, or would be forced to learn arcane facts about how we
    do things before then downloading the non-free unofficial image.

    That may seem like it's not too bad if one is on cheap high-bandwidth
    link, but if one is in one of the less well connected bits of the world,
    it might be a significant cost to do that wasted download.

    Also, we're a volunteer organisation, and those lost users could well be
    people who would have become active contributors if they'd not fallen at
    the first fence, which is bad for the future health of the project.

    One could blame the users for getting hold of the wrong hardware, and
    tell them to go and buy themselves some RYF-certified hardware instead,
    but again that is rather descriminatory, as one might be talking to
    someone for whom the only computer they can afford is the one that was
    donated to them, and they had no say in the nature of the WiFi chipset
    (even if they'd known enough to have an opinion)

    =-=-=

    To answer the question in the other mail about DFSG: No.

    The non-free firmware is still not part of Debian proper, we just happen
    to distribute it alongside Debian as a service to those users who would otherwise be deprived of the chance to run Debian if we did not.

    We've had a non-free section on our mirror network for decades for the
    same reason. See points 4 & 5 of the Debian Social Contract:

    https://www.debian.org/social_contract

    It is of course possible to argue this the other way, and we do have
    downstream derivatives that ensure that no non-free software gets
    anywhere near their distribution, so if that's more to your taste you
    might want to consider one of them.

    On the other hand, there are real security issues that have been dealt
    with in updates to the (non-free) microcode for the CPUs that run the
    vast majority of machines, so many consider it rather unwise to shun
    every last scrap of non-free software, even if we find that distasteful.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmTtAQ0ACgkQ0EujoAEl 1cBABA/9EGI7fk15TbdFhgeA8wiBcmxseSH0IdcVBBZpS3HH5vF3yHW72wiAWVup PswwM5v85FaXjfZAaVgxKVfQMg3LHwaOp/M0li02PYZq5D5+6lVxypTmV5D4GftE 0l0Lcz4J1CIQMv0Xbs++4aczNSVrvuCPo18g0INJLQIwa804sqwBIwnM6rHCPTJm 09ZDyAIsSX1ueeQe/tKuCtwLlBr5wLAUcdMoWUovhuaEDYUNUareZp8IVRiXfqGc KgpFVa2DIfuElbO58ofO03GurOylHe+5XQlW1qQYCtSWb+5oQRv0EAkuYrfSi1nz MY8LN3wckrbkJeYUFOoqU2r0QeujBSVo/XLYif9uwUnuwUdeCDKAeIyKc/UrnwCH gASCB5cdAvBBcdgpAySHkvocYXg0rOoyntpnHj2TXyTWVxXyApsRifog/0CY30lm V0D4rH8i8ZMKQahgld2S+04ekIb8TqFj5QJqiQKUUQyBpWiM66n5jItGyCbaBmOZ x6PpYtQZPRACI1CQ9NDyVVO6vxqERy4e5qUBaY2CxIBQv0d7PobLqDIAgm+xzk1C aV1rzH4mM/eoHtGTLN+u48MaTptHR7BcuiJeAPqByRQ4UYKni7l7LZuv+oL0FNtb vSM4NN3rIAQfOYTz6NgN7JHbGtGcOd6Rc6AcgdM+MW+BR7BBehE=r6fr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Birzhan Amirov@21:1/5 to [email protected] on Tue Aug 29 02:50:01 2023
    I just want to use this chance to thank the entire Debian Images Team for
    many years of releasing DVDs that actually had 0 bytes of closed-source
    code.
    I have been following the project since "Jessie", and always admired your strict and puristic approach.
    Allow me to wish you the best of luck growing your user base.

    Regards, John.

    On Mon, Aug 28, 2023 at 1:17 PM Philip Hands <[email protected]> wrote:

    Birzhan Amirov <[email protected]> writes:

    Hello,

    Thank you for your quick and detailed reply.

    I suppose that we could provide a tool that would be able produce an
    image with no non-free data on it ... but the effort required to build
    and
    test such a tool would have to be diverted from other tasks.
    ... to contribute to such an effort, then I'm sure the Debian-CD team
    will be
    glad to explain what would be involved.

    Just curious, is my understanding correct, that you had such a tool at
    the
    time of 11.6.0, but not anymore?

    No - it used to be that 2 sets of images were produced, and which then
    had to be independently tested, thus expending a lot of overlapping
    effort.

    It is also the case that many people would download the "Official"
    images, and discover that they could not actually achieve an install on
    the hardware that they had to hand, and then would either abandon Debian never to return, or would be forced to learn arcane facts about how we
    do things before then downloading the non-free unofficial image.

    That may seem like it's not too bad if one is on cheap high-bandwidth
    link, but if one is in one of the less well connected bits of the world,
    it might be a significant cost to do that wasted download.

    Also, we're a volunteer organisation, and those lost users could well be people who would have become active contributors if they'd not fallen at
    the first fence, which is bad for the future health of the project.

    One could blame the users for getting hold of the wrong hardware, and
    tell them to go and buy themselves some RYF-certified hardware instead,
    but again that is rather descriminatory, as one might be talking to
    someone for whom the only computer they can afford is the one that was donated to them, and they had no say in the nature of the WiFi chipset
    (even if they'd known enough to have an opinion)

    =-=-=

    To answer the question in the other mail about DFSG: No.

    The non-free firmware is still not part of Debian proper, we just happen
    to distribute it alongside Debian as a service to those users who would otherwise be deprived of the chance to run Debian if we did not.

    We've had a non-free section on our mirror network for decades for the
    same reason. See points 4 & 5 of the Debian Social Contract:

    https://www.debian.org/social_contract

    It is of course possible to argue this the other way, and we do have downstream derivatives that ensure that no non-free software gets
    anywhere near their distribution, so if that's more to your taste you
    might want to consider one of them.

    On the other hand, there are real security issues that have been dealt
    with in updates to the (non-free) microcode for the CPUs that run the
    vast majority of machines, so many consider it rather unwise to shun
    every last scrap of non-free software, even if we find that distasteful.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil


    <div dir="ltr">I just want to use this chance to thank the entire Debian Images Team for many years of releasing DVDs that actually had 0 bytes of closed-source code.<div><div>I have been following the project since &quot;Jessie&quot;, and always admired
    your strict and puristic approach.<br><div>Allow me to wish you the best of luck growing your user base.</div></div><div><br></div><div>Regards, John.</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 28, 2023 at
    1:17 PM Philip Hands &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Birzhan Amirov &lt;<a href="mailto:
    [email protected]" target="_blank">[email protected]</a>&gt; writes:<br>

    &gt; Hello,<br>
    &gt;<br>
    &gt; Thank you for your quick and detailed reply.<br>
    &gt;<br>
    &gt;&gt; I suppose that we could provide a tool that would be able produce an<br>
    &gt; image with no non-free data on it ... but the effort required to build and<br>
    &gt; test such a tool would have to be diverted from other tasks.<br>
    &gt;&gt; ... to contribute to such an effort, then I&#39;m sure the Debian-CD team<br>
    &gt; will be<br>
    &gt; glad to explain what would be involved.<br>
    &gt;<br>
    &gt; Just curious, is my understanding correct, that you had such a tool at the<br>
    &gt; time of 11.6.0, but not anymore?<br>

    No - it used to be that 2 sets of images were produced, and which then<br>
    had to be independently tested, thus expending a lot of overlapping<br> effort.<br>

    It is also the case that many people would download the &quot;Official&quot;<br>
    images, and discover that they could not actually achieve an install on<br>
    the hardware that they had to hand, and then would either abandon Debian<br> never to return, or would be forced to learn arcane facts about how we<br>
    do things before then downloading the non-free unofficial image.<br>

    That may seem like it&#39;s not too bad if one is on cheap high-bandwidth<br> link, but if one is in one of the less well connected bits of the world,<br>
    it might be a significant cost to do that wasted download.<br>

    Also, we&#39;re a volunteer organisation, and those lost users could well be<br>
    people who would have become active contributors if they&#39;d not fallen at<br>
    the first fence, which is bad for the future health of the project.<br>

    One could blame the users for getting hold of the wrong hardware, and<br>
    tell them to go and buy themselves some RYF-certified hardware instead,<br>
    but again that is rather descriminatory, as one might be talking to<br>
    someone for whom the only computer they can afford is the one that was<br> donated to them, and they had no say in the nature of the WiFi chipset<br> (even if they&#39;d known enough to have an opinion)<br>

    =-=-=<br>

    To answer the question in the other mail about DFSG:  No.<br>

    The non-free firmware is still not part of Debian proper, we just happen<br>
    to distribute it alongside Debian as a service to those users who would<br> otherwise be deprived of the chance to run Debian if we did not.<br>

    We&#39;ve had a non-free section on our mirror network for decades for the<br> same reason. See points 4 &amp; 5 of the Debian Social Contract:<br>

      <a href="https://www.debian.org/social_contract" rel="noreferrer" target="_blank">https://www.debian.org/social_contract</a><br>

    It is of course possible to argue this the other way, and we do have<br> downstream derivatives that ensure that no non-free software gets<br>
    anywhere near their distribution, so if that&#39;s more to your taste you<br> might want to consider one of them.<br>

    On the other hand, there are real security issues that have been dealt<br>
    with in updates to the (non-free) microcode for the CPUs that run the<br>
    vast majority of machines, so many consider it rather unwise to shun<br>
    every last scrap of non-free software, even if we find that distasteful.<br>

    Cheers, Phil.<br>
    -- <br>
    Philip Hands -- <a href="https://hands.com/~phil" rel="noreferrer" target="_blank">https://hands.com/~phil</a><br>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Birzhan Amirov on Tue Aug 29 10:10:01 2023
    Birzhan Amirov <[email protected]> writes:

    I just want to use this chance to thank the entire Debian Images Team for many years of releasing DVDs that actually had 0 bytes of closed-source
    code.
    I have been following the project since "Jessie", and always admired your strict and puristic approach.
    Allow me to wish you the best of luck growing your user base.

    If you actually want the level of purity-over-practicality that your
    mail suggests, people have been providing it long before you took an
    interest in Debian -- the FSF keeps a list of candidates:

    https://www.gnu.org/distros/free-distros.html

    [ Oh, I see gNewSense is dead :-/ , and Trisquel is now (... erm, since
    2007 ... obviously wasn't paying attention) based on Ubuntu, which
    doesn't seem like the most obvious way of doing that, but whatever. ]

    and while the FSF now criticises Debian primarily on the basis of
    this (IMO rather minor) change in installer policy:

    https://www.gnu.org/distros/common-distros.html#Debian

    they've always been critical of Debian, for pretty-much exactly the same
    reason as this policy change occurred -- a willingness to let users
    obtain a working Debian system by providing them with the chance to get
    hold of non-free software as well as Debian, if that's their only choice:

    https://web.archive.org/web/20220211101539/https://www.gnu.org/distros/common-distros.html#Debian

    so if you were expecting FSF levels of purity[1], then you probably haven't been paying close enough attention from the start.

    While looking at the FSF site, I noticed this somewhat amusing method
    for reconciling these two stances:

    https://www.gnu.org/philosophy/install-fest-devil.html

    but I'm afraid I've no idea how one could implement something equivalent
    in the medium of downloadable images.

    I'm sure if we had a tool for converting "+firmware" to "pure" images,
    we'd be publishing the checksums to the "pure" result, and making them
    easy to get for those that prefer them, but nobody's yet produced such a
    tool.

    It really just needs someone to care enough to maintain it (or pay
    someone else to do so).

    I don't think we'd go back to the situation where we somehow hide the "+firmware" images though, because we've acknowledged that that is
    effectively an abuse of our users, so I would expect the FSF to be
    almost exactly as grumpy even if "pure" images were easily available.

    Cheers, Phil.

    [1] of course, the FSF distributes documentation that is non-free by
    Debian's definition (in the form of GFDL-with-immutable-sections), so
    other forms of purity are also available :-)
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmTtpuMACgkQ0EujoAEl 1cDqfRAAg//rOhmKTedMt8nbcjOBPGt9t5oRysPCv8oePFPkLyoKunixcmIG1rrT 8ZrlbtjzTsZks9p3jR8hFt48nh9jf0SvdXVsLtxRnznMBDoh8NwxPBge5u8SIgHB w52YgjxXC7lcZfShzROQAkkwC5WvS9tFJza6YLAWg92FVDfuRz5RGRcEMEK2lloF aSD2xpGJrUa/bzigfnYk572ptjEadR8m1EgvmwtWDQbjrbUyRr+sqBj90Ku0XHQ4 LTy0hftFK4q6SL0O3E7fpVNpTt9nL6yRowQp+rOcQIvmM5lIJUYxnYeXw3jgr3pP MOXoIj4KH1+Ski1/hNYCxLNOjq6/rwP4aRMB6AhL24I3Gn9QTLfYL3PDSJ2wfP6H 21QRosPmb3htxEoTcfXXNZsd2ql7a/Ub86xAaet4jAEj6H1wWAflxm0ONtXIcYyo 1y5rK6vcf7S4HLbRQbxI7hrcNYzeu06n6ZIJVWBMPnMfcCmfMyOMLjAf73hNlJ3G HLp6UE+ijx2riqQyPQub60gYAyD2Jp+Nm1ftmfiupV23FmTvIknyTJZNJHOP5Id/ arDxYbYKfkVUkSWbkj3H8vYuhd5bLfBBEYQi4mL7B/ZkhWlDj8zsxkqjn4Fs6Rbz mCN066tg/uuQbDyne4Oi0eLe5tO9gN6CC8ur4R0LsEkd3UeH68w=QRV5
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Thomas Schmitt@21:1/5 to Philip Hands on Tue Aug 29 13:30:01 2023
    Hi,

    Philip Hands wrote:
    While looking at the FSF site, I noticed this somewhat amusing method
    for reconciling these two stances:
    https://www.gnu.org/philosophy/install-fest-devil.html

    Typically Stallman:

    "My new idea is that the install fest could allow the devil to hang
    around, off in a corner of the hall, or the next room. (Actually, a
    human being wearing sign saying 'The Devil,' and maybe a toy mask or
    horns.) The devil would offer to install nonfree drivers [...]"


    but I'm afraid I've no idea how one could implement something equivalent
    in the medium of downloadable images.

    Andrew M.A. Cater wrote:
    You can pass various parameters to the installer: you can also uninstall the non-free firmware after installation -

    So one could explain and advertise to organizers of install fests how
    to instruct the installer to ignore non-free firmware.
    Or an imposter of archangel Michael could offer to eradicate any impurity
    as last step of the installation (possibly after making a first backup).


    Philip Hands wrote:
    I'm sure if we had a tool for converting "+firmware" to "pure" images,

    As GNU maintainer of xorriso i am probably obliged to help with the purification of Debian ISOs, if there is real interest.
    The main open problem which i see in this regard is the list of develish packages which shall be removed.

    Would /firmware/Contents-firmware with the third word in each line tell
    what is non-free ? In debian-12.0.0-amd64-netinst.iso i see lines like:
    /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw firmware-ath9k-htc_1.4.0-108-gd856466+dfsg1-1.3_all.deb main
    /lib/firmware/amd/amd_sev_fam17h_model0xh.sbin amd64-microcode_3.20230414.1_amd64.deb non-free-firmware

    Is all non-free firmware under /pool confined in /pool/non-free-firmware ?
    (Is all firmware under /firmare mirrored under /pool ?)

    If so, then one could remove the develish files from the various content
    lists and re-pack the ISO with updated content lists and removed files.
    This is probably not more complicated than merging debian-cd ISOs by
    https://dev.lovelyhq.com/libburnia/libisoburn/raw/master/test/merge_debian_isos
    as described in
    https://wiki.debian.org/MergeDebianIsos

    (It seems that /firmware/Contents-firmware should be merged, too.
    Now i wonder why this did not hamper the use of the resulting amd64 ISOs.
    Is it not used by any program ?)


    I would expect the FSF to be
    almost exactly as grumpy even if "pure" images were easily available.

    A do-it-yourself purifier program would not bring Debian on the FSF list
    of free distros. But it would help with posing as install fest devil.

    People who want to organize such a fest are entitled to ask me for
    support.


    Have a nice day :)

    Thomas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Birzhan Amirov@21:1/5 to [email protected] on Tue Aug 29 19:10:01 2023
    If you actually want the level of purity-over-practicality that your mail
    suggests ... that is effectively an abuse of our users
    **Just pointing out the fact that at the time of 11.6.0 you didn't have a problem releasing both free and non-free version.**
    Important part ^

    Also, it feels like in your reply you're trying to hide or obfuscate this
    fact, probably because if this fact is not mentioned, your reasoning starts
    to work (e.g. I quote: "that is
    effectively an abuse of our users").

    You've provided more questionable reasoning in your previous emails,
    responding to which I find grossly counterproductive.

    Just for the record, let me explain you what I mean exactly, because it
    might not have penetrated.
    What I did - is read the DFSG, and IMO it follows from this document that
    you should have at least one official release that doesn't have
    closed-source, just as you did at the time of 11.6.0.
    And let me break it down for you, the way I'm reading it:

    1. Debian <https://en.wikipedia.org/wiki/Debian> Project uses *Debian Free Software Guidelines* (*DFSG*) to determine whether a software license is a free software license <https://en.wikipedia.org/wiki/Free_software_license>;
    2. This, in turn is used to determine whether a piece of software can be included in Debian.
    3. and guideline #2 is: Inclusion of source code.
    IMO a natural conclusion from this guideline is that if you get a release
    of Debian, it should be all open source software.

    Your reply to that was: "The non-free firmware is still not part of Debian proper, we just happen to distribute it alongside Debian".
    And that's fine if you happen to distribute anything alongside whatever you want, and you're not called Official Debian.
    The only problem with that is for some reason now you still call those
    releases "Official distributions" and don't provide pure free software
    releases anymore.
    (Memo: earlier releases with non-free software were called "Unofficial").
    But honestly, call them what you want, as long as you provide a pure free software release, just like you should, judging from your own manifesto.

    You might have stronger reasons than those you've officially acknowledged
    to compromise your releases with code that you can't vouch for and you can
    deny knowledge of what it does exactly; but the way I see it - that's your issue and I'm not going to speculate or blame.
    Maybe at some point somebody more responsible will restart proper releases
    in accordance with DFSG, I'll keep my hope for that.
    And given the quality of your demonstrated argument and reasoning I intend
    to discontinue my participation in this thread, for the purpose of saving
    my time for more productive activities.

    Again, thank you for 11.6.0 and earlier releases.

    Regards, John.







    On Tue, Aug 29, 2023 at 1:04 AM Philip Hands <[email protected]> wrote:

    Birzhan Amirov <[email protected]> writes:

    I just want to use this chance to thank the entire Debian Images Team for many years of releasing DVDs that actually had 0 bytes of closed-source code.
    I have been following the project since "Jessie", and always admired your strict and puristic approach.
    Allow me to wish you the best of luck growing your user base.

    If you actually want the level of purity-over-practicality that your
    mail suggests, people have been providing it long before you took an
    interest in Debian -- the FSF keeps a list of candidates:

    https://www.gnu.org/distros/free-distros.html

    [ Oh, I see gNewSense is dead :-/ , and Trisquel is now (... erm, since
    2007 ... obviously wasn't paying attention) based on Ubuntu, which
    doesn't seem like the most obvious way of doing that, but whatever. ]

    and while the FSF now criticises Debian primarily on the basis of
    this (IMO rather minor) change in installer policy:

    https://www.gnu.org/distros/common-distros.html#Debian

    they've always been critical of Debian, for pretty-much exactly the same reason as this policy change occurred -- a willingness to let users
    obtain a working Debian system by providing them with the chance to get
    hold of non-free software as well as Debian, if that's their only choice:


    https://web.archive.org/web/20220211101539/https://www.gnu.org/distros/common-distros.html#Debian

    so if you were expecting FSF levels of purity[1], then you probably haven't been paying close enough attention from the start.

    While looking at the FSF site, I noticed this somewhat amusing method
    for reconciling these two stances:

    https://www.gnu.org/philosophy/install-fest-devil.html

    but I'm afraid I've no idea how one could implement something equivalent
    in the medium of downloadable images.

    I'm sure if we had a tool for converting "+firmware" to "pure" images,
    we'd be publishing the checksums to the "pure" result, and making them
    easy to get for those that prefer them, but nobody's yet produced such a tool.

    It really just needs someone to care enough to maintain it (or pay
    someone else to do so).

    I don't think we'd go back to the situation where we somehow hide the "+firmware" images though, because we've acknowledged that that is effectively an abuse of our users, so I would expect the FSF to be
    almost exactly as grumpy even if "pure" images were easily available.

    Cheers, Phil.

    [1] of course, the FSF distributes documentation that is non-free by
    Debian's definition (in the form of GFDL-with-immutable-sections), so
    other forms of purity are also available :-)
    --
    Philip Hands -- https://hands.com/~phil


    <div dir="ltr">&gt; If you actually want the level of purity-over-practicality that your mail suggests ... that is effectively an abuse of our users<div><i>*Just pointing out the fact that at the time of 11.6.0 you didn&#39;t have a problem releasing
    both free and non-free version.*</i></div><div>Important part ^</div><div><br></div><div>Also, it feels like in your reply you&#39;re trying to hide or obfuscate this fact, probably because if this fact is not mentioned, your reasoning starts to work (e.
    g. I quote: &quot;that is<br></div>effectively an abuse of our users&quot;).<div><br></div><div>You&#39;ve provided more questionable reasoning in your previous emails, responding to which I find grossly counterproductive.</div><div><br></div><div>Just
    for the record, let me explain you what I mean exactly, because it might not have penetrated.</div><div>What I did - is read the DFSG, and IMO it follows from this document that you should have at least one official release that doesn&#39;t have closed-
    source, just as you did at the time of 11.6.0.</div><div>And let me break it down for you, the way I&#39;m reading it:</div><div><span style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px"><br></span></div><div><span style="color:rgb(32,33,34)
    ;font-family:sans-serif;font-size:14px">1. </span><a href="https://en.wikipedia.org/wiki/Debian" title="Debian" style="text-decoration-line:none;color:rgb(51,102,204);background-image:none;background-position:initial;background-size:initial;background-
    repeat:initial;background-origin:initial;background-clip:initial;font-family:sans-serif;font-size:14px">Debian</a><span style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px"> Project uses </span><b style="color:rgb(32,33,34);font-family:
    sans-serif;font-size:14px">Debian Free Software Guidelines</b><span style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px"> (</span><b style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px">DFSG</b><span style="color:rgb(32,33,34);
    font-family:sans-serif;font-size:14px">) </span><span style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px">to determine whether a software license is a </span><a href="https://en.wikipedia.org/wiki/Free_software_license" class="gmail-mw-
    redirect" title="Free software license" style="background-image:none;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;text-decoration-line:none;color:rgb(51,102,204);font-
    family:sans-serif;font-size:14px">free software license</a><font color="#202122" face="sans-serif"><span style="font-size:14px">;</span></font></div><div><font color="#202122" face="sans-serif"><span style="font-size:14px">2. This, </span></font><span
    style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px">in turn is used to determine whether a piece of software can be included in Debian.</span></div><div><span style="color:rgb(32,33,34);font-family:sans-serif;font-size:14px">3. and
    guideline #2 is: </span>Inclusion of source code.</div><div>IMO a natural conclusion from this guideline is that if you get a release of Debian, it should be all open source software.<br></div><div><br></div><div>Your reply to that was: &quot;The non-
    free firmware is still not part of Debian proper, we just happen to distribute it alongside Debian&quot;.</div><div>And that&#39;s fine if you happen to distribute anything alongside whatever you want, and you&#39;re not called Official Debian.</div><div>
    The only problem with that is for some reason now you still call those releases &quot;Official distributions&quot; and don&#39;t provide pure free software releases anymore. </div><div>(Memo: earlier releases with non-free software were called &quot;
    Unofficial&quot;).</div><div>But honestly, call them what you want, as long as you provide a pure free software release, just like you should, judging from your own manifesto.</div><div><br></div><div>You might have stronger reasons than those you&#39;ve
    officially acknowledged to compromise your releases with code that you can&#39;t vouch for and you can deny knowledge of what it does exactly; but the way I see it - that&#39;s your issue and I&#39;m not going to speculate or blame.</div><div>Maybe at
    some point somebody more responsible will restart proper releases in accordance with DFSG, I&#39;ll keep my hope for that.</div><div>And given the quality of your demonstrated argument and reasoning I intend to discontinue my participation in this thread,
    for the purpose of saving my time for more productive activities.</div><div><br></div><div><div>Again, thank you for 11.6.0 and earlier releases.</div><br class="gmail-Apple-interchange-newline"></div><div>Regards, John.</div><div><br></div><div><br></
    <div><br></div><div><br></div><div><div><br><div><br></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Aug 29, 2023 at 1:04 AM Philip Hands &lt;<a href="mailto:[email protected]">[email protected]</a>&gt;
    wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Birzhan Amirov &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; writes:<


    &gt; I just want to use this chance to thank the entire Debian Images Team for<br>
    &gt; many years of releasing DVDs that actually had 0 bytes of closed-source<br>
    &gt; code.<br>
    &gt; I have been following the project since &quot;Jessie&quot;, and always admired your<br>
    &gt; strict and puristic approach.<br>
    &gt; Allow me to wish you the best of luck growing your user base.<br>

    If you actually want the level of purity-over-practicality that your<br>
    mail suggests, people have been providing it long before you took an<br> interest in Debian -- the FSF keeps a list of candidates:<br>

      <a href="https://www.gnu.org/distros/free-distros.html" rel="noreferrer" target="_blank">https://www.gnu.org/distros/free-distros.html</a><br>

    [ Oh, I see gNewSense is dead :-/ , and Trisquel is now (... erm, since<br>
      2007 ... obviously wasn&#39;t paying attention) based on Ubuntu, which<br>   doesn&#39;t seem like the most obvious way of doing that, but whatever. ]<br>

    and while the FSF now criticises Debian primarily on the basis of<br>
    this (IMO rather minor) change in installer policy:<br>

      <a href="https://www.gnu.org/distros/common-distros.html#Debian" rel="noreferrer" target="_blank">https://www.gnu.org/distros/common-distros.html#Debian</a><br>

    they&#39;ve always been critical of Debian, for pretty-much exactly the same<br>
    reason as this policy change occurred -- a willingness to let users<br>
    obtain a working Debian system by providing them with the chance to get<br> hold of non-free software as well as Debian, if that&#39;s their only choice:<br>

      <a href="https://web.archive.org/web/20220211101539/https://www.gnu.org/distros/common-distros.html#Debian" rel="noreferrer" target="_blank">https://web.archive.org/web/20220211101539/https://www.gnu.org/distros/common-distros.html#Debian</a><br>

    so if you were expecting FSF levels of purity[1], then you probably haven&#39;t<br>
    been paying close enough attention from the start.<br>

    While looking at the FSF site, I noticed this somewhat amusing method<br>
    for reconciling these two stances:<br>

      <a href="https://www.gnu.org/philosophy/install-fest-devil.html" rel="noreferrer" target="_blank">https://www.gnu.org/philosophy/install-fest-devil.html</a><br>

    but I&#39;m afraid I&#39;ve no idea how one could implement something equivalent<br>
    in the medium of downloadable images.<br>

    I&#39;m sure if we had a tool for converting &quot;+firmware&quot; to &quot;pure&quot; images,<br>
    we&#39;d be publishing the checksums to the &quot;pure&quot; result, and making them<br>
    easy to get for those that prefer them, but nobody&#39;s yet produced such a<br>
    tool.<br>

    It really just needs someone to care enough to maintain it (or pay<br>
    someone else to do so).<br>

    I don&#39;t think we&#39;d go back to the situation where we somehow hide the<br>
    &quot;+firmware&quot; images though, because we&#39;ve acknowledged that that is<br>
    effectively an abuse of our users, so I would expect the FSF to be<br>
    almost exactly as grumpy even if &quot;pure&quot; images were easily available.<br>

    Cheers, Phil.<br>

    [1] of course, the FSF distributes documentation that is non-free by<br> Debian&#39;s definition (in the form of GFDL-with-immutable-sections), so<br> other forms of purity are also available :-)<br>
    -- <br>
    Philip Hands -- <a href="https://hands.com/~phil" rel="noreferrer" target="_blank">https://hands.com/~phil</a><br>
    </blockquote></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew M.A. Cater@21:1/5 to Birzhan Amirov on Tue Aug 29 20:10:02 2023
    On Tue, Aug 29, 2023 at 09:53:07AM -0700, Birzhan Amirov wrote:
    If you actually want the level of purity-over-practicality that your mail
    suggests ... that is effectively an abuse of our users
    **Just pointing out the fact that at the time of 11.6.0 you didn't have a problem releasing both free and non-free version.**
    Important part ^


    Can I remind you that Debian has an open process for this and for any changes.

    We *did* have a problem: people couldn't install Debian straightforwardly without firmware. It is definitely true that this adversely affected some visually impaired users who were entirely unable to use the speech installer without Intel sound firmware.

    That is one of the justifications for the full GR last year which also changed the Debian Social contract, accordingly.

    Also, it feels like in your reply you're trying to hide or obfuscate this fact, probably because if this fact is not mentioned, your reasoning starts to work (e.g. I quote: "that is
    effectively an abuse of our users").


    Can I respectfully suggest that you acquaint yourself with more of the
    history around these changes: debian-vote lists for August and September 2022 are probably good places to start and corresponding debian-devel discussions.

    You've provided more questionable reasoning in your previous emails, responding to which I find grossly counterproductive.


    Can I request you to be constructive rather than critical: the Code of Conduct applies here as elsewhere.

    Just for the record, let me explain you what I mean exactly, because it
    might not have penetrated.
    What I did - is read the DFSG, and IMO it follows from this document that
    you should have at least one official release that doesn't have closed-source, just as you did at the time of 11.6.0.
    And let me break it down for you, the way I'm reading it:


    The Project as a whole chose to change the process: the code still exists
    to generate fully free images. For practical reasons, the release team
    chooses not to: that would involve reverting to double the amount of testing for questionable benefit overall, amongst other things.

    1. Debian <https://en.wikipedia.org/wiki/Debian> Project uses *Debian Free Software Guidelines* (*DFSG*) to determine whether a software license is a free
    software license <https://en.wikipedia.org/wiki/Free_software_license>;
    2. This, in turn is used to determine whether a piece of software can be included in Debian.
    3. and guideline #2 is: Inclusion of source code.
    IMO a natural conclusion from this guideline is that if you get a release
    of Debian, it should be all open source software.

    Your reply to that was: "The non-free firmware is still not part of Debian proper, we just happen to distribute it alongside Debian".

    I refer you to the comprehensive discussions above around these issues: Phil
    is correct here and the Social Contract modification makes this clear.

    And that's fine if you happen to distribute anything alongside whatever you want, and you're not called Official Debian.
    The only problem with that is for some reason now you still call those releases "Official distributions" and don't provide pure free software releases anymore.
    (Memo: earlier releases with non-free software were called "Unofficial").
    But honestly, call them what you want, as long as you provide a pure free software release, just like you should, judging from your own manifesto.

    You might have stronger reasons than those you've officially acknowledged
    to compromise your releases with code that you can't vouch for and you can deny knowledge of what it does exactly; but the way I see it - that's your issue and I'm not going to speculate or blame.

    The tone you employ suggests that you're "blaming" the Project as a whole
    for doing something you disagree with.

    Maybe at some point somebody more responsible will restart proper releases
    in accordance with DFSG, I'll keep my hope for that.

    As one of those closely involved in the Debian images release process, I would strongly suggest that the team is not irresponsible - but I would say that wouldn't I.

    This issue was also fully discussed at the Debconf in Kossovo,
    for example. https://meetings-archive.debian.net/pub/debian-meetings/2022/DebConf22/debconf22-199-fixing-the-firmware-mess.webm
    https://meetings-archive.debian.net/pub/debian-meetings/2022/DebConf22/debconf22-294-debian-installer-and-images-team-bof.webm

    Given that the sponsor of the GR has been involved with image releases
    almost from the beginning of the Project, you might also wish to
    reconsider your statement from a position of greater factual knowledge after due consideration.

    And given the quality of your demonstrated argument and reasoning I intend
    to discontinue my participation in this thread, for the purpose of saving
    my time for more productive activities.

    Again, thank you for 11.6.0 and earlier releases.

    Regards, John.

    With every good wish, as ever,

    Andy Cater
    [[email protected]]









    On Tue, Aug 29, 2023 at 1:04 AM Philip Hands <[email protected]> wrote:

    Birzhan Amirov <[email protected]> writes:

    I just want to use this chance to thank the entire Debian Images Team for many years of releasing DVDs that actually had 0 bytes of closed-source code.
    I have been following the project since "Jessie", and always admired your strict and puristic approach.
    Allow me to wish you the best of luck growing your user base.

    If you actually want the level of purity-over-practicality that your
    mail suggests, people have been providing it long before you took an interest in Debian -- the FSF keeps a list of candidates:

    https://www.gnu.org/distros/free-distros.html

    [ Oh, I see gNewSense is dead :-/ , and Trisquel is now (... erm, since
    2007 ... obviously wasn't paying attention) based on Ubuntu, which
    doesn't seem like the most obvious way of doing that, but whatever. ]

    and while the FSF now criticises Debian primarily on the basis of
    this (IMO rather minor) change in installer policy:

    https://www.gnu.org/distros/common-distros.html#Debian

    they've always been critical of Debian, for pretty-much exactly the same reason as this policy change occurred -- a willingness to let users
    obtain a working Debian system by providing them with the chance to get hold of non-free software as well as Debian, if that's their only choice:


    https://web.archive.org/web/20220211101539/https://www.gnu.org/distros/common-distros.html#Debian

    so if you were expecting FSF levels of purity[1], then you probably haven't been paying close enough attention from the start.

    While looking at the FSF site, I noticed this somewhat amusing method
    for reconciling these two stances:

    https://www.gnu.org/philosophy/install-fest-devil.html

    but I'm afraid I've no idea how one could implement something equivalent
    in the medium of downloadable images.

    I'm sure if we had a tool for converting "+firmware" to "pure" images,
    we'd be publishing the checksums to the "pure" result, and making them
    easy to get for those that prefer them, but nobody's yet produced such a tool.

    It really just needs someone to care enough to maintain it (or pay
    someone else to do so).

    I don't think we'd go back to the situation where we somehow hide the "+firmware" images though, because we've acknowledged that that is effectively an abuse of our users, so I would expect the FSF to be
    almost exactly as grumpy even if "pure" images were easily available.

    Cheers, Phil.

    [1] of course, the FSF distributes documentation that is non-free by Debian's definition (in the form of GFDL-with-immutable-sections), so
    other forms of purity are also available :-)
    --
    Philip Hands -- https://hands.com/~phil


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin@21:1/5 to Birzhan Amirov on Thu Aug 31 08:40:01 2023
    Hi Birzhan,
    Unfortunately it's all legal, the debian social contract was even
    officially changed to make this degradation real - justifying once again
    the reason why GNU community is not supporting debian project: https://www.debian.org/releases/stable/amd64/ch06s04

    Cheers!
    Martin

    On 8/28/23 02:38, Birzhan Amirov wrote:
    Additionally,

    I've just checked the DVDs of 12.1.0 and 11.6.0, and it looks like all
    the DVDs of 12.1.0 are labeled like the following:
    `Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-{X} with firmware 20230722-10:49`, where X is the DVD number.

    ---

    However, the releases of 11.6.0 are labeled as the following:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Official amd64 DVD Binary-{X} 20221217-10:40`, where X is the DVD number.
    Notice how there is no string "with firmware" in these labels.

    At the same time, when looking at a community version of 11.6.0 DVD,
    which contains non-free firmware, that's exactly how it's labeled:
    `Debian GNU/Linux 11.6.0 _Bullseye_ - Unofficial amd64 DVD Binary-1 with firmware 20221217-10:46`.
    Notice that the string "with firmware" is present in the label of the
    DVD with non-free firmware.

    ---

    I'm still trying to understand what that's supposed to mean.
    Are you `Officially` non-free software now, or is it some insider attack trying to compromise your integrity?
    Do you have an `Official` way to de-poison your release, and if so, is
    it published as a document?

    Regards, John.

    On Sun, Aug 27, 2023 at 4:12 PM Birzhan Amirov <[email protected] <mailto:[email protected]>> wrote:

    Hello Debian CD Images team.

    I decided to switch to the latest version (12.1.0), and encountered
    the following issues:

    1) Looks like this DVD image:
    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/
    <https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/>
    https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso <https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-12.1.0-amd64-DVD-1.iso>
    which is supposed to be Free Software only, actually contains 3rd
    party non-free firmware.
    The way I discovered it was that my 6th gen Lenovo ThinkPad x1
    carbon wifi card started working, while with 11.6 and prior it
    didn't have the firmware and was disabled because of that.

    This image is labeled as
    "Debian GNU/Linux 12.1.0 _Bookworm_ - Official amd64 DVD Binary-1
    with firmware 20230722-10:49".
    Was there some kind of mistake when publishing the images?

    2) Also, when I tried to download this disk [DVD-1] using jigdo, I
    ended up getting an image of the first disk that wasn't bootable.

    Thanks and Regards, John Amirov.


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)